Computer Security Incident Response Officer

You will join the CISO Solutions and Services team within the SNCB CISO organization (Cyber- and Information Security Office). You responsible to drive the roadmap and implementation of CSIRT enhancements and new services within the SNCB organization, to manage the CSIRT Cyber Security Engineers, to align with direct peers in the CISO S&S team and the security services providers.

Roadmap and CSIRT enhancements

The CSIRT environment has multiple tools and solutions in place that help to identify potential cyber security incidents and risks on a proactive way. You will be the expert of the tools and implement new features and functionalities together with the CSIRT engineers.

Manage CSIRT engineers

As an experienced Cyber security professional you will supervise the CSIRT Cyber Security Engineers during their daily work. You will evaluate their technical decisions and follow-up their containment, remediation and recovery actions.
Your in-depth security experience will help the CSIRT team to address complex incidents and you will take the lead in the technical investigation and set out the right countermeasures to get the situation under control as quickly and adequate as possible.

Align within the CISO S&S team and security service providers

The CISO S&S team covers different solutions and services offered to the NMBS organization, some of them delivered by external security services providers. Your role is to be aligned with your direct peers and represent the CSIRT BUILD and RUN activities to them. You will ensure that the overall team is kept up-to-date about CSIRT.

Vereisten

• Bachelor's degree or equivalent experience
• 3 to 7 years of relevant experience in people management and incident handling
• Competent to analyse processes and propose improvements
• Capable to solve complex technical incidents or coordinate other technical profiles to address those problems as a team
• Technical
  • In-depth knowledge Security Operations, CSIRT and SIEM tools
  • Knowledge of networking and security protocols like TCP, UDP, VPN, VLAN, BGP, …
  • Used to work with security solutions like IDS/IPS, proxy, mail-relays, FW-rulebases, end-point anti-virus configurations, …
  • Keyworks like social engineering, scraping, information disclosure, brand monitoring, darkweb, … have no secrets for you
  • Experience with different red teaming techniques
• Customer focus and able to handle in an organisation-sensitive way
• Record of responsibility
• Spoken and written fluency in English, and Dutch or French
• Passive understanding of Dutch and French